CVE-2022-1030

The CVE-2022-1030 entry concerns Okta Advanced Server Access Client for Linux and macOS prior to version 1.58.0, which is vulnerable to command injection via a specially crafted URL. The root cause is a URL-based command injection that lets an attacker, who knows a valid team name for the victim ...

CVE-2023-0093

CVE-2023-0093 affects Okta Advanced Server Access Client versions 1.13.1–1.65.0. The root cause is a vulnerable third‑party library, webbrowser , used by the ASA client, enabling command injection . Exploitation requires the user to be phished into entering an attacker‑controlled server URL durin...